Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
File:                     IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft (raw, json)
Hash identifier:          W7YITPtrkfL6TQgQ7skRrMGpA1JMa7sHJLUbNt+pOLE=
Subject key identifier:   00:7D:89:FC:67:E4:5D:99:47:A3:F4:30:B3:FB:0D:23:91:56:6A:53
Authority key identifier: 20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
Certificate issuer:       /CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Certificate serial:       01A0B61B37FC9640AED181152BA1A133852B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
Manifest number:          0AB3
Signing time:             Fri 18 Sep 2026 20:00:32 +0000
Manifest this update:     Fri 18 Sep 2026 20:00:32 +0000
Manifest next update:     Sat 19 Sep 2026 20:00:32 +0000
Files and hashes:         1: B8NWIS0qgjWvxdwNizeWF9UM7Ps.roa (hash: rzUDRmnrB+1AGVp6cfXX8ddQrRKFt7AAPLkq6j+Xitc=)
                          2: IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl (hash: cUuBq0WROlCgbaDA+N2qWRLahCrhHk37LgbPQ5i5Hao=)
                          3: VEvXqpjtpnWqPhFsK1VjLPWcZ84.roa (hash: Ivq9B7fCTNtjnlU9FptxC9e2xrpHUztFCNXJ+qaH7LQ=)
                          4: Y2rIYreLOiywxBX2z6aRfWF7q04.roa (hash: dpqG15krdpxJUlUEVSBqVv3+kw/A6MahmXEVhi6w3cg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:1b:37:fc:96:40:ae:d1:81:15:2b:a1:a1:33:85:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
        Validity
            Not Before: Sep 18 20:00:32 2026 GMT
            Not After : Sep 19 20:00:32 2026 GMT
        Subject: CN=007d89fc67e45d9947a3f430b3fb0d2391566a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:a5:7d:9a:ac:ee:55:6e:85:b7:49:4c:e0:
                    dd:6f:1b:4c:62:ec:93:5a:f1:1a:45:d0:fa:ea:5e:
                    c0:67:c7:19:26:54:34:50:67:dd:62:4f:62:75:72:
                    b6:58:ca:14:0f:43:30:06:3a:fc:58:f4:e7:33:57:
                    eb:40:27:9b:86:6b:12:c5:72:4f:fd:77:4a:52:b9:
                    cc:53:2b:1b:cc:db:e0:78:d9:7d:5a:8a:d3:cb:90:
                    e7:66:ae:66:63:56:70:72:a4:68:c1:ac:b8:bd:4e:
                    41:d9:df:ae:71:13:c7:4d:b1:ac:97:95:2b:1b:0a:
                    51:93:c3:da:66:f4:d7:d5:ff:7e:55:4f:42:21:d7:
                    1e:51:b9:84:80:04:93:bd:cb:b9:97:ec:99:a8:45:
                    c9:fb:30:d8:19:9b:82:a5:cb:a1:1f:b0:21:6a:9f:
                    22:43:cf:0f:a0:4e:97:0a:1b:50:f6:75:c5:14:85:
                    84:4e:77:42:62:3c:7f:2c:16:d3:e4:4a:b9:13:63:
                    e5:92:f8:5b:19:b9:1f:9c:04:04:ea:70:f9:c9:08:
                    78:5f:b8:0f:63:4c:17:f8:12:7c:90:9e:e0:4e:78:
                    37:af:36:f9:3f:ba:81:d8:73:ea:fc:94:4d:8e:ea:
                    d9:6b:88:a1:84:d9:bf:ab:95:a9:fc:60:f0:43:0b:
                    e8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7D:89:FC:67:E4:5D:99:47:A3:F4:30:B3:FB:0D:23:91:56:6A:53
            X509v3 Authority Key Identifier:
                keyid:20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b4:a2:0e:5e:f6:e5:f6:02:7d:cf:5c:7b:28:8d:9a:af:f6:
         d1:c6:1b:54:29:f5:8d:14:1e:f5:63:c8:46:72:55:ad:32:20:
         95:2b:de:6c:c8:01:5c:1f:2b:7f:14:22:5f:2d:eb:95:93:cb:
         26:ac:5d:65:86:70:22:b9:3a:fa:4d:1d:84:e6:1c:b3:14:77:
         48:6d:1c:e5:c9:7f:d9:de:30:d3:af:13:85:13:f6:4b:29:0b:
         33:7e:ae:8f:75:7d:d0:5b:81:bb:89:72:a7:1b:fe:46:62:e7:
         54:b9:27:97:d8:0d:9c:f3:8a:6d:90:57:3d:4e:d7:4b:91:9c:
         a4:d5:f7:aa:22:73:ba:c1:ca:d4:12:63:78:76:a0:47:7f:5f:
         44:c2:9a:77:50:82:1b:24:00:89:ee:66:2b:3f:00:c4:0d:96:
         03:2e:43:19:b1:32:08:a4:4d:b1:34:d0:85:0c:38:1e:2a:69:
         09:1d:e8:b5:14:20:d6:b0:95:7c:2d:d0:ad:c0:69:bf:36:6b:
         47:c0:ac:8b:3c:42:db:4c:8e:bd:6f:76:c2:89:80:f7:6f:1d:
         78:eb:06:5c:f0:78:f6:bd:6c:e5:63:ec:96:e0:f3:77:ab:8f:
         ed:e7:6f:98:94:28:5a:a5:95:61:dc:ba:d5:b3:f0:91:1c:1a:
         9c:9c:23:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 03:41:38 2026 by rpki-client